This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa File: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (raw, json) Hash identifier: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo= Subject key identifier: B8:52:0C:F4:E4:62:D0:EC:34:F9:3E:0D:DF:7A:93:A3:1D:19:6D:77 Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019B7F1510D77D24574FE69E25F8E8F129D3 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa Signing time: Fri 02 Jan 2026 14:20:45 +0000 ROA not before: Fri 02 Jan 2026 14:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199881 IP address blocks: 89.234.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:10:d7:7d:24:57:4f:e6:9e:25:f8:e8:f1:29:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8520cf4e462d0ec34f93e0ddf7a93a31d196d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:84:2a:4e:b6:90:f3:b0:70:7c:a2:e3:b1: f9:ca:cc:35:16:8d:51:83:f6:00:12:2b:97:2e:5c: c3:76:f5:3d:11:db:86:df:5f:cc:30:1f:50:5e:79: bc:7c:0a:f6:cb:32:a3:9a:9b:ec:f5:31:f4:bb:f0: ea:f3:ec:94:1f:4c:5f:9a:ca:b2:76:94:4c:21:60: 9b:3f:20:7a:74:02:54:fd:ca:b6:23:53:39:2c:88: de:a9:91:71:7f:bc:dc:8f:e5:d7:eb:50:09:31:24: 78:92:a6:c8:20:87:5e:c7:d8:36:0d:23:23:6d:55: 13:92:45:ee:29:11:9d:fa:43:aa:4e:1e:d9:4d:ea: 7a:71:c6:f2:f7:d0:3a:34:4d:da:fe:4c:2d:83:05: 01:93:f2:2c:68:49:ea:c0:e9:2e:41:60:13:aa:33: 6c:99:88:4a:0b:3f:a3:c0:75:bc:a2:f3:0f:2b:7a: 06:ed:85:9c:b7:6b:24:07:4f:7e:ef:90:e9:f7:a9: eb:9e:8f:a2:5c:51:2f:38:11:88:69:15:2e:78:74: b3:f6:71:c8:b1:a4:d2:c4:75:4e:25:b0:91:47:25: fe:8a:e6:9d:32:8d:2d:a8:97:fe:dc:e3:df:e2:23: 57:81:a3:36:ad:62:dc:70:e2:56:c0:ea:cb:e4:f1: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:52:0C:F4:E4:62:D0:EC:34:F9:3E:0D:DF:7A:93:A3:1D:19:6D:77 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.234.132.0/24 Signature Algorithm: sha256WithRSAEncryption 31:c3:c2:d3:76:bb:31:15:3e:02:23:7d:4d:d0:f4:b6:b2:e9: f6:fd:01:e6:7a:c3:7d:fd:eb:aa:8c:72:0c:5f:6d:2a:de:a5: 10:dd:00:68:50:b5:fb:d1:ab:54:ce:04:af:8d:85:b7:96:7c: 0f:ed:88:57:f2:a3:e6:bf:77:b3:a7:1e:b1:de:53:55:81:22: 2c:d0:89:51:fb:a0:29:25:3c:5f:ac:22:51:47:4c:c1:01:dd: 5a:9d:5f:43:ec:fd:bd:19:d3:89:e2:da:d0:40:bc:9e:e3:58: b0:ea:9a:b8:5c:bf:63:ae:a0:70:0a:19:45:b7:bc:5d:7e:a6: 53:89:c7:2e:81:ec:6b:0c:91:b0:70:02:f0:1b:a2:a2:29:cd: 9b:c1:37:1c:76:57:b7:0e:c6:64:d1:b0:79:b9:4c:f8:b6:37: a2:73:90:e9:9c:1b:cf:6a:ab:35:24:1d:e5:d4:9a:51:b9:43: 65:d0:45:96:57:9f:e2:47:0e:14:57:49:04:9a:8a:01:64:5f: d3:f6:ae:8e:97:a1:ba:fa:52:df:8f:74:36:03:a6:f0:ac:bc: 7c:0b:77:e6:67:e4:7e:a8:4c:e6:7a:9a:e7:2d:93:91:b3:1c: 86:ef:7f:71:1b:12:dd:3e:21:b7:f4:ab:6b:fb:f0:ff:f5:1e: 3a:54:63:5a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/FRDXfSRXT+aeJfjo8SnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODUyMGNmNGU0NjJkMGVjMzRmOTNlMGRkZjdhOTNhMzFkMTk2ZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA046EKk62kPOwcHyi47H5ysw1Fo1R g/YAEiuXLlzDdvU9EduG31/MMB9QXnm8fAr2yzKjmpvs9TH0u/Dq8+yUH0xfmsqy dpRMIWCbPyB6dAJU/cq2I1M5LIjeqZFxf7zcj+XX61AJMSR4kqbIIIdex9g2DSMj bVUTkkXuKRGd+kOqTh7ZTep6ccby99A6NE3a/kwtgwUBk/IsaEnqwOkuQWATqjNs mYhKCz+jwHW8ovMPK3oG7YWct2skB09+75Dp96nrno+iXFEvOBGIaRUueHSz9nHI saTSxHVOJbCRRyX+iuadMo0tqJf+3OPf4iNXgaM2rWLccOJWwOrL5PHy1QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLhSDPTkYtDsNPk+Dd96k6MdGW13MB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xL3VGSU05T1JpME93MC1UNE4zM3FUb3gwWmJYYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNmLTk2NWQ2ZDYwM2Jm YS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZ6oQw DQYJKoZIhvcNAQELBQADggEBADHDwtN2uzEVPgIjfU3Q9Lay6fb9AeZ6w33966qM cgxfbSrepRDdAGhQtfvRq1TOBK+NhbeWfA/tiFfyo+a/d7OnHrHeU1WBIizQiVH7 oCklPF+sIlFHTMEB3VqdX0Ps/b0Z04ni2tBAvJ7jWLDqmrhcv2OuoHAKGUW3vF1+ plOJxy6B7GsMkbBwAvAboqIpzZvBNxx2V7cOxmTRsHm5TPi2N6JzkOmcG89qqzUk HeXUmlG5Q2XQRZZXn+JHDhRXSQSaigFkX9P2ro6Xobr6Ut+PdDYDpvCsvHwLd+Zn 5H6oTOZ6muctk5GzHIbvf3EbEt0+Ibf0q2v78P/1HjpUY1o= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:56 2026 by rpki-client